GoConqr has a new look! Let us know what you think.

Sign up free

Flashcards

Information Security

Rayan Syed English 37 cards

Cards in this deck (37)

  1. 1What are the 3 Types of Access Controls?Mandatory Access Control, Discretionary Access Controls, Non-Discretionary Access Controls
  2. 24 fundamental functions of access controlsIdentification, authentication, authorization, accountability
  3. 3What is a packet filtering firewall?a firewall that examines the header information of data packets, prohibits packet with a certain address from passing
  4. 4What are the 3 subsets of packet filtering firewalls?Static: Filter rules developed and installed in the firewall
    Dynamic: allows the firewall to react and deal with the event
    Stateful Packet Inspection: firewalls keep track of network connections between internal and external systems
  5. 5How does a MAC layer firewall work?MAC addresses of specific host computers are linked to the access control list (ACL) entries that identify packets that can be sent, others traffic is blocked
  6. 6Best Firewall configuration depends on what 3 factors?Budget, the objective of the network, organizations ability to implement it
  7. 7What are things to consider when implementing a firewall?the cost of implementing, expertise in the organization, training of the employees, simplicity, how much security does it provide
  8. 8What are the best practices when implementing a firewall?1. All traffic from trusted networks are allowed
    2. Firewall device never accessed from public Network
    3. all SMTP (simple mail transport) are allowed
    4. no ICMP (internet control) allowed
  9. 9What is a VPN?A secure connection between 2 systems, an extension of a public network into a private network
  10. 10What are the 3 Types of VPN?Secured VPN, Trusted VPN, Hybrid VPN
  11. 11What is Transport Mode and Tunnel Mode?Transport Mode: users connect to a remote host, encrypting only the data not the header info
    Tunnel Mode: Header information is also encrypted so the data cannot be traced to a source or destination
  12. 12What are some reasons to use an IDPS?identify and report intrusions, examine how and why it happened, prevent problems from increasing, increase fear
  13. 13What is NIDPS?this IDPS resides on an organizations network via a computer, examines packets, looks for attack patterns, can monitor large area, does not interrupt the system when implemented, but can be overwhelmed and miss some attacks
  14. 14Whats is HIDPS?this IDPS resides no a host computer and monitors network on only that system, can detect attacks that elude NIDPS, can access encrypted info but use large amount of space and effect the peformance of the system
  15. 15What are the 2 IDPS detection methods? How do they work?Signature Based Detection: scans network and searches for any attack patterns that is already known
    Anomaly Based Detection: scans network, if the patterns is abnormal then alert, can detect new attack patterns, may have false positives
  16. 16Active Response vs Passive ResponseActive Response: When IDPS system taking action against intrusion, collect and modify info
    Passive Response System: setting off alarm when intrusion detected
  17. 17Strengths & Limitations of IDPSStrengths: test security, alert staff, monitoring and analysis, recognize attacks, non security experts can monitor system
    Limitations: detecting reporting responding at same time is a heavy load, detecting new attacks, auto investigate without human interaction
  18. 18What are the three basic deployments (contol strategies) of an IDPS?Cenralized: all IDPS functions managed from one location
    Fully Distributed: Control functions applied at each IDPS loaction
    Partially Distributed: mix of both, individual agents can still analyze attacks and report to central station to report
  19. 19What is a honeypot? honeynet?decoy systems used to lure attackers away from critical systems, honeynet is a network of multiple honeypots.
  20. 20What is a padded cell systemworks with IDPS and honeypots, lures attackers to an area where they cannot do any harm, gives time to analyza and deal with attacker
  21. 21Disadvantages of Honeypots/padded cells?can cause the attacker to get frustrated them causing them to launch a more sever attack, not found generally useful yet, legal problems (enticement, entrapment)
  22. 22Plain text can be encrypted through ___ stream and _____ streambit, block
  23. 23What is the difference between Substitution Cipher and Transposition Cipher?Substitution is changing one value for another, monoalphabetic (1 letter), polyalphabetic (2+ letter) or vignere cipher (more complex polyalphabetic) Transposition is rearranging pattern within a block based cipher
  24. 24Whats is XOR cipher?uses boolean, if two bits are idenitcal binary 0 if not then binary 1.
  25. 25What are the book based ciphers?Book cipher, running key cipher, template cipher
  26. 26What are the different types of Cryptographic algorithms?Hash, Symmetric, Assymetric,
  27. 27What is Hash? how does it work?hashing algorithms are mathematical, converts contents into a fixed size, used in password verifications.
  28. 28What is the difference between Asymmetric and Symmetric encryption?Symmetric uses only one private key for encrypting and decrypting while Asymmetric uses a public and private key.
  29. 29What is the weakness of Asymmetric encryption?Distributing and maintaining a secure key among users
  30. 30The purpose of a digital signature is __________________verify information transfered via an elctronic system using Asymmetric encryption.
  31. 31______ is the process of hiding messages with digital encoding in a picture.Steganography
  32. 327 major Sources of physical lossextreme temperatures, gases, liquids, living organisms, projectiles, movement, energy anomalies
  33. 33What are ways to secure a facility?take advantage of physical location, ID cards, guards, fences, locks, keys, mantraps
  34. 34What is fingerprinting?Reveals information of a system that is going to be attacked, good for defenders as they can find vulnerabilities in their system
  35. 353 common implementations of firewall architectures?single bastion hosts, screened hosts, screened subnet
  36. 364 ways of converting from old security system to new?Direct, phased, pilot, parallel
  37. 37Difference between Trusted VPN, Secure VPN, and Hybrid VPNTrusted: using private circuits alone
    Secure: send encrypted traffic over a public network
    Hybrid: using a secure VPN over a trusted VPN

Information

Description
Flashcards on Information Security, created by Rayan Syed on 06/12/2018.
Created by
Rayan Syed
Views
1
Rating

Feedback

What is it about?

What do you think of the new look?

How do you like it?